authtest

package

v2.1.0 Latest Latest Go to latest Published: May 2, 2026 License: Apache-2.0 Imports: 12 Imported by: 0

Details

This section is empty.

This section is empty.

func RunAlgorithmNormalizationCases(t *testing.T, normalize func([]string) ([]string, error))

RunAlgorithmNormalizationCases verifies algorithm allowlist normalization rules.

func RunBearerTokenCases(t *testing.T, parse func(string) (string, bool, error))

RunBearerTokenCases verifies a shared malformed-header matrix.

func RunClaimRequirementDefaultCases[T any](
	t *testing.T,
	defaults func() T,
	toFlags func(T) ClaimRequirements,
)

RunClaimRequirementDefaultCases verifies the default claim policy.

func RunClaimValidationCases[T any](
	t *testing.T,
	defaults func() T,
	makeReq func(ClaimRequirements) T,
	validate func(jwt.MapClaims, T) error,
)

RunClaimValidationCases verifies a shared required-claims matrix.

func RunSkipHeaderCases(t *testing.T, shouldSkip func(*http.Request) bool)

RunSkipHeaderCases verifies trusted-proxy skip-header behavior.

func RunSubjectAlgorithmCases(
	t *testing.T,
	newParser func(t *testing.T, kf keyfunc.Keyfunc) func(string) (string, error),
)

RunSubjectAlgorithmCases verifies shared signing-algorithm enforcement.

type ClaimRequirements struct {
	RequireSubject    bool
	RequireExpiration bool
	RequireIssuedAt   bool
	RequireNotBefore  bool
}

ClaimRequirements mirrors the required-claim policy exercised in auth tests.